In this month's Industry Insights, we explore:
- Florida's AI Mandate
- Florida's Board of Education passed AI rules on September 16, 2026, for K-12 districts and the 28 Florida College System colleges, including family opt-in and a non-AI alternative.
- The Board of Governors issued a notice of intent for the state's 12 public universities, so IT leaders touching more than one segment face two asynchronous rule sets.
- Canada's Big Six Tokenize Deposits
- On September 22, 2026, BMO, CIBC, National Bank, RBC, Scotiabank, and TD announced they are exploring a joint tokenized-deposit solution. No launch date, ledger design, or governance model has been announced.
- For FSI CIOs, the announcement is a reason to revisit the stablecoin decision, not evidence that investment is urgent.
- The Chief Digital Services Officer (CDSO) Emerges
- Canada's Treasury Board Secretariat is replacing the traditional CIO role with the CDSO, measured on user adoption, citizen experience, and satisfaction.
- Data and information governance is the one domain the CDSO cannot delegate.
- The Widening Drone Threat
- A Police Executive Research Forum report warns that falling drone costs and advancing AI are creating a public-safety threat for US cities. The Safer Skies Act lets local agencies disable unauthorized drones at major public events.
- Detection depends on network and spectrum infrastructure, which brings government IT into a responsibility framed until now as law enforcement's.
- Two Policy Paths for Healthcare Cybersecurity
- A House discussion draft and HHS's proposed HIPAA Security Rule overhaul call for similar controls, including stronger authentication, encryption, monitoring, and penetration testing. Scope, timing, and funding remain unresolved.
- The control categories are likely to persist even if implementation details change. Legacy systems and medical devices are the main gaps to watch.
- Physical AI Moves Onto the Factory Floor
- Vision-Language-Action models convert vision and language into motor control, targeting work where parts and products vary and exceptions are common.
- Physical AI is likely to emerge as a stack rather than a single model, and manufacturers may begin judging automation by time-to-new-skill.
- The Data Behind Mining Synergies
- On September 13, 2026, Gold Fields made a confidential, non-binding proposal for Northern Star Resources, which its board unanimously rejected. Gold Fields' US$4 to 5 billion synergy estimate is preliminary and prepared without due diligence.
- Operational data becomes the evidence that decides whether the savings are real.
- Professional Services' Blind Spot
- Ernst & Young disclosed that an unauthorized third party accessed a third-party IT service management platform used by its tax support teams, and downloaded tickets, some containing client tax information.
- CIOs should expect vendor-risk conversations to extend to internal support and ticketing platforms.
- The Rise of Agentic Commerce
- AI shopping agents are emerging as a retail channel with no agreed standard, and retailers are pushing back. Amazon blocked Meta's Muse agent from checkout access in September 2026.
- The central question is whether external agents can accurately and securely represent a retailer's products, offers, and policies.
- Grid's AI Paradox: AI Is Both the Load & the Solution
- National Grid Partners' September 2026 survey found 74% of utilities say AI-driven data center growth is already affecting grid reliability, and 78% have deployed at least one AI application for large-load customer planning.
- Trusted data and governance are likely to limit how far AI can scale in operations.
- Plan for Policy Change in Sports Streaming
- On September 14, 2026, Amazon, Netflix, and YouTube formed the Streaming Access and Choice Alliance to give streaming platforms a coordinated voice in sports-distribution policy.
- The coalition creates no new technology requirements, but media-rights decisions carry consequences for identity, entitlement, integrations, and fan data.
